$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bip7hY7qKWoom0ilHhCAoso6z8U.roa File: bip7hY7qKWoom0ilHhCAoso6z8U.roa (raw, json) Hash identifier: 4Rsg/pD+l/TutlTNArWkKafRJHJ6eLvFymtYFSS8G8s= Subject key identifier: 6E:2A:7B:85:8E:EA:29:6A:28:9B:48:A5:1E:10:80:A2:CA:3A:CF:C5 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2681 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bip7hY7qKWoom0ilHhCAoso6z8U.roa Signing time: Fri 22 Aug 2025 08:42:59 +0000 ROA not before: Fri 22 Aug 2025 08:42:59 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 119.77.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9857 (0x2681) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Aug 22 08:42:59 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6E2A7B858EEA296A289B48A51E1080A2CA3ACFC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ba:14:64:2e:90:00:ad:1f:33:d6:2b:49:47: d6:18:3f:19:e6:14:77:a5:c9:e5:f8:52:b6:9f:ba: 7b:68:fc:71:21:c5:90:7a:51:69:82:06:ca:e7:7d: 59:70:7e:15:00:b3:83:48:dc:e4:a9:6a:82:b8:68: 1d:81:6d:97:13:c5:1d:9a:8e:bb:90:b5:9f:16:ad: 32:1a:a9:85:bc:93:bd:79:59:c5:ef:cb:f3:89:60: 80:f8:be:94:2b:1b:fd:50:70:f5:73:bd:3e:0d:e3: 5f:06:d6:b8:99:3b:8a:57:7e:88:3a:a3:38:19:e4: 54:56:ce:c7:65:8a:fe:fe:a8:ab:d1:89:ef:d8:cb: 04:8a:ce:2e:9c:85:79:db:89:98:03:81:3b:ff:07: ad:b4:3b:e1:48:1a:50:f5:a6:ac:aa:f1:cc:dc:53: 89:f3:2b:db:e2:d8:e9:13:13:8b:ec:e5:43:99:c9: 68:60:91:24:59:c5:94:81:31:74:44:f8:e1:91:44: cb:b4:8c:f0:59:80:1e:5d:44:7c:b9:63:79:55:76: 3b:60:be:e7:49:e7:dc:f9:b0:0c:84:6c:36:4b:f8: 8d:6f:f6:46:e5:3d:3c:b7:bb:ee:3e:b1:da:f0:7a: 01:28:36:d5:24:e9:9c:72:9a:a5:b7:c6:65:c7:7d: 7e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:2A:7B:85:8E:EA:29:6A:28:9B:48:A5:1E:10:80:A2:CA:3A:CF:C5 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bip7hY7qKWoom0ilHhCAoso6z8U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.77.188.0/22 Signature Algorithm: sha256WithRSAEncryption 21:ca:f9:c6:82:2e:c4:6f:f5:96:03:b6:1a:3d:a7:26:49:3b: dd:83:fd:9e:e8:bf:f6:b8:ea:ea:81:e6:70:57:57:32:eb:a5: d2:fc:06:9d:e8:34:bf:d5:5b:11:01:0a:34:8c:fa:a5:4e:2a: 3a:42:78:fb:04:1c:74:83:a4:5e:fa:96:a6:2c:e0:6e:00:a9: 58:e6:69:ba:25:fc:fd:30:4b:9e:8f:2c:f6:65:85:34:7d:46: a0:79:e3:35:1a:4a:13:b0:e8:65:0c:2f:14:89:bf:ec:cd:99: bb:4d:67:22:fe:eb:d7:be:c8:62:e3:c1:c6:88:76:ff:bf:7d: 2d:91:de:52:b0:d0:35:f0:be:22:b1:be:d9:2f:10:92:48:c7: 29:39:77:0b:e7:37:3d:e6:04:66:69:7c:27:86:98:54:56:c8: 35:5c:aa:85:94:b8:cf:0c:57:fc:6d:79:8b:e5:a4:2b:6f:b9: 43:cf:17:90:72:34:28:9c:b9:f0:df:f7:4d:b7:d7:76:b2:20: 93:e7:38:4f:f5:d6:ae:29:60:89:b1:91:04:bb:b4:83:48:4f: 69:62:68:78:ec:c8:27:40:f2:d1:8f:dc:30:59:7b:02:f8:f8: 3b:44:e4:f0:4f:ce:63:fc:ff:a3:0f:d8:e1:4a:8d:38:50:0e: c2:67:a4:2d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJoEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw ODQyNTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZFMkE3Qjg1OEVFQTI5 NkEyODlCNDhBNTFFMTA4MEEyQ0EzQUNGQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKuhRkLpAArR8z1itJR9YYPxnmFHelyeX4Urafunto/HEhxZB6 UWmCBsrnfVlwfhUAs4NI3OSpaoK4aB2BbZcTxR2ajruQtZ8WrTIaqYW8k715WcXv y/OJYID4vpQrG/1QcPVzvT4N418G1riZO4pXfog6ozgZ5FRWzsdliv7+qKvRie/Y ywSKzi6chXnbiZgDgTv/B620O+FIGlD1pqyq8czcU4nzK9vi2OkTE4vs5UOZyWhg kSRZxZSBMXRE+OGRRMu0jPBZgB5dRHy5Y3lVdjtgvudJ59z5sAyEbDZL+I1v9kbl PTy3u+4+sdrwegEoNtUk6ZxymqW3xmXHfX4xAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUbip7hY7qKWoom0ilHhCAoso6z8UwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2JpcDdoWTdxS1dvb20waWxI aENBb3NvNno4VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ3 TbwwDQYJKoZIhvcNAQELBQADggEBACHK+caCLsRv9ZYDtho9pyZJO92D/Z7ov/a4 6uqB5nBXVzLrpdL8Bp3oNL/VWxEBCjSM+qVOKjpCePsEHHSDpF76lqYs4G4AqVjm abol/P0wS56PLPZlhTR9RqB54zUaShOw6GUMLxSJv+zNmbtNZyL+69e+yGLjwcaI dv+/fS2R3lKw0DXwviKxvtkvEJJIxyk5dwvnNz3mBGZpfCeGmFRWyDVcqoWUuM8M V/xteYvlpCtvuUPPF5ByNCicufDf902313ayIJPnOE/11q4pYImxkQS7tINIT2li aHjsyCdA8tGP3DBZewL4+DtE5PBPzmP8/6MP2OFKjThQDsJnpC0= -----END CERTIFICATE-----Generated at Sun Aug 24 11:39:38 2025 by rpki-client